CVE-2023-35297: 
vulnerability analysis and mitigation

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-35297) is a Critical vulnerability discovered in July 2023. The vulnerability affects various versions of Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server editions (NVD). The vulnerability has been assigned a CVSS score of 7.5, indicating a high severity level (CrowdStrike).

The vulnerability has been classified as CWE-843 (Access of Resource Using Incompatible Type - 'Type Confusion') by Microsoft. It has a CVSS v3.1 Base Score of 8.1 (HIGH) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. The attack is limited to systems connected to the same network segment as the attacker and cannot be performed across multiple networks like WANs, being restricted to systems on the same network switch or virtual network (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute remote code on the affected systems. The vulnerability affects confidentiality, integrity, and availability of the system, all rated as High according to the CVSS metrics (NVD).

Microsoft has released security patches to address this vulnerability. The patches are available through the standard Windows Update mechanism. Affected users and organizations are advised to apply the security updates to mitigate the risk (Microsoft).